Overview

overview

4

Static

static

3

Facture_DF...24.pdf

windows10-2004-x64

4

Facture_DF...24.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Recouvrement – Écriture lettrée N°DFV-838424.eml
  • Size 327KB
  • Sample260727-m18a8aae58
  • SHA256 0aa26e0c6ef8d3ff1cb43cd0f71ccd79480b7ef62d08d233855f1bd466071bdb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • Recouvrement – Écriture lettrée N°DFV-838424.eml
    .eml 327KB
  • Facture_DFV-838424.pdf
    .pdf 230KB
  • email-html-2.txt
    .html 2KB
  • email-plain-1.txt
    378B

Recouvrement – Écriture lettrée N°DFV-838424.eml

  • SHA256 0aa26e0c6ef8d3ff1cb43cd0f71ccd79480b7ef62d08d233855f1bd466071bdb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Fri, 24 Jul 2026 22:27:12 +0000

Subject

=?Windows-1252?Q?Recouvrement_=96_=C9criture_lettr=E9e_N=B0DFV-838424?=

Content-Type

multipart/mixed; boundary="_004_MRYP264MB6090FB1A5C11FF7FDCA465A9DECF2MRYP264MB6090FRAP_"

Received

from MRZP264CU002.outbound.protection.outlook.com (mail-francesouthazon11020095.outbound.protection.outlook.com [52.101.165.95]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id uk-mta-235--dWHQjreO5OVQCSYs_W-6A-1; Fri, 24 Jul 2026 23:27:18 +0100

from MRYP264MB6090.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:6d::8) by MR1P264MB1843.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:5::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.12; Fri, 24 Jul 2026 22:27:12 +0000

from MRYP264MB6090.FRAP264.PROD.OUTLOOK.COM ([fe80::50ba:fa3e:ef11:5df]) by MRYP264MB6090.FRAP264.PROD.OUTLOOK.COM ([fe80::50ba:fa3e:ef11:5df%4]) with mapi id 15.21.0245.012; Fri, 24 Jul 2026 22:27:12 +0000

Message-Id

<MRYP264MB6090FB1A5C11FF7FDCA465A9DECF2@MRYP264MB6090.FRAP264.PROD.OUTLOOK.COM>